Splunk Search

Input Latitude & Longtitude directly

materaj
New Member

Dear ziegfried,

Firstly, I really like your Google Maps App. but I have question about input. When I search with geoip like "sourcetype=gps | geoip src",src is source-ip of client, it's work correctly .But can I input latitude and longitude directly like "sourcetype=gpslocation | geoip latitude,longtitude" , latitude and longitude are the location of client.Or some syntax like that, please tell me.

Thank you for create this apps.

Tags (2)
0 Karma

ziegfried
Influencer

You don't need to call the geoip command if your results already contain latitude and longitude information. The best way to have it displayed is to set the _lat and _lng fields:

sourcetype=gpslocation | eval _lat=latitude | eval _lng=longitude

It should work without setting _lat and _lng, the geonormalize command is automatically invoked on the results before displaying the results on the map, but maybe there's a bug and it's not detecting the fields. Please try searching just for sourcetype=gpslocation in the maps view.

ziegfried
Influencer

Does it work for you?

0 Karma

materaj
New Member

Thank you for your answer.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...